Vonde Arrive – Privacy Policy
Mobile app (Android and iOS)
Effective: 5 November 2026.
1. Introduction and scope
This policy applies to the Vonde Arrive mobile app (the “App”). The App helps an employee record their arrival and departure in the Vonde Aura Access Gate system that their employer uses. The App contains no advertising and does not use third-party tools to track you.
The vondetech.com website has its own privacy notice: https://vondetech.com/en/privacy-policy
2. Who handles the data?
The App is operated by KMAK Kelet-Magyarországi Adatközpont Kft. (registered office: H-5000 Szolnok, Szapáry utca 20., Hungary; brand name: Vonde Technology). Contact: hello@vondetech.com.
For employee data processed through the App, the data controller is your employer, the organization whose Vonde Aura system you use. It decides whether the App is enabled, at which sites it operates and how long movement records are kept. KMAK Kft. acts on the employer’s behalf as a data processor.
3. What data does the App handle?
| Data | When and why | What reaches our servers / retention |
|---|---|---|
| Precise location (GPS: latitude, longitude, accuracy) | In the foreground and in the background. When you arrive near a site, when you clock in or out remotely (home office), and when you confirm leaving a site. | Only the position and accuracy at the moment of the event. We do not store a movement trail. A pending arrival request is deleted 30 days after it closes. A recorded movement is kept according to your employer’s settings. |
| Company Wi-Fi name (SSID) and identifier (BSSID) | Only when the phone is connected to the network your employer has defined. Other networks are never sent. | Needed to accept the arrival; kept as part of the movement record according to your employer’s settings. |
| Movement (clock-in/out time, how it was recorded) | To record attendance and to show the “Recorded” confirmation in the App. | According to your employer’s settings. |
| Device connection (phone name, connection ID, sign-in time, security log) | To keep you signed in and to allow the phone to be signed out. | The access token is stored only as a hash. A connection lasts 365 days and ends immediately when signed out. |
| Settings (for example the exit-confirmation prompt) | To customize how the App behaves. | Deleted when the phone is signed out. |
The biometric lock (fingerprint / face) works only on the phone: the App never receives or sends your fingerprint or face data.
4. Location data and background use
To detect arrival automatically, the App monitors the phone’s position even when it is not open. This is done locally by the phone’s operating-system geofencing: the App is only notified when the phone enters the site area defined by your employer (typically a radius of about 100 m) or leaves it.
The App does not record a continuous route and does not send the phone’s movement to the server. Only the position at the moment of an event is sent.
The operating system asks for location access before the App uses it. Without location, automatic arrival detection does not work, but you can still clock in by card, QR code or at the terminal. Remote (home office) clock-in requires your position.
5. How we use it, and how we do not
We use it to record arrival and departure, to show the confirmation card on the terminal, to check proximity to the site, to prevent misuse and to run the App securely.
We do not use it for advertising, profiling or marketing, and we do not sell it.
6. Who receives the data?
Your employer (the controller) can see the data in its system, according to its access rights. We do not share it with third parties for advertising or analytics. Our hosting and operations providers may access it as processors on our behalf.
7. Legal basis
Your employer processes employee data on the basis of its legitimate interest arising from the employment relationship and its legal obligations (rules on monitoring employees, Section 11/A of the Hungarian Labour Code), with prior notice. Your employer informs you about location processing before you use the App.
8. Withdrawing permissions
You can withdraw location access at any time in the phone’s Settings (Apps → Vonde Arrive → Permissions → Location). After that, automatic arrival stops working, while scan-based clock-in still works. The phone can also be signed out from the App or by your administrator; the connection ends immediately.
9. Security
Data travels between the App and the server over an encrypted (HTTPS) connection. Sign-in uses the Vonde Aura web login in the phone’s browser (OAuth 2.1, PKCE); the App never sees your password. Tokens are kept in the phone’s secure storage (Keychain / Keystore); a refresh token becomes invalid after use, and re-submitting a used token ends the entire connection.
10. Children
The App is intended for employees and is not directed to persons under 16. We do not knowingly collect data from children.
11. Your rights and data deletion
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Because your employer is the controller, it is best to send your request to them first. If that does not help, or you do not know whom to contact, write to hello@vondetech.com. You can also sign the phone out to delete its connection and settings.
You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, www.naih.hu).
12. Changes to this policy
We may update this policy. The current version is always available at this page, with its effective date.
13. Contact
Privacy questions and requests: hello@vondetech.com